CVE-2014-6132
Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3 through 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1 allows remote authenticated…
Does this matter?
Lower severity and a low EPSS score (1.62%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3 through 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
- CVSS 2.0
- 3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N
- EPSS
- 1.62% probability · 75th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- ibm/websphere service registry and repository
- Source
- psirt@us.ibm.com
References
- http://secunia.com/advisories/61805
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV64000
- http://www.ibm.com/support/docview.wss?uid=swg21693379Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21693381Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21693384Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21693387Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21693389
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96812
- http://secunia.com/advisories/61805
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV64000
- http://www.ibm.com/support/docview.wss?uid=swg21693379Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21693381Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21693384Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21693387Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21693389
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96812
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.